Directive (EU) 2016/798 on Railway Safety (Recast)

Do we need a single safety certificate before our trains can run on EU tracks — and what happens if our safety management system fails an audit?

Every railway undertaking needs a single safety certificate from the EU Agency for Railways or the national safety authority before accessing any EU rail infrastructure — operating without one means immediate exclusion from the network and potential national penalties [Art. 10, Art. 30].

Short Answer

Directive (EU) 2016/798 recasts and replaces Directive 2004/49/EC, establishing a unified EU framework for railway safety. It introduces the single safety certificate (SSC) regime: railway undertakings must demonstrate a compliant safety management system (SMS) covering risk control, staff competence, incident reporting, and emergency procedures [Art. 9, Art. 10]. Infrastructure managers require a separate safety authorisation from their national safety authority (NSA) [Art. 12]. The Directive mandates each Member State to establish an independent national safety authority and an independent investigating body for accidents and incidents [Art. 16, Art. 21].

Who is affected

All railway undertakings operating on the EU rail network (passenger, freight, shunting), all infrastructure managers, entities in charge of maintenance (ECMs) for freight wagons and other vehicles, and other actors in the rail supply chain including keepers, manufacturers, consignors, loaders, and maintenance workshops [Art. 2, Art. 4]. Metros, trams, and functionally separate local networks are excluded [Art. 2(2)]. Member States may exclude privately owned sidings, heritage railways, and light rail infrastructure [Art. 2(3)].

Deadline

The Directive is fully in force and applicable since 16 June 2020 (extended transposition deadline). Ongoing obligations apply permanently: single safety certificates must be renewed every 5 years [Art. 10(13)]; safety authorisations are valid for 5 years [Art. 12(2)]; annual safety reports must be submitted by 31 May each year [Art. 9(6)].

Risk

Operating without a valid single safety certificate or safety authorisation results in denial of access to the railway infrastructure [Art. 10(1), Art. 12(1)]. Member States must lay down effective, proportionate and dissuasive penalties for infringements of national provisions adopted under this Directive [Art. 30]. The Agency or NSA may restrict, suspend or revoke certificates if serious safety risks are identified during supervision [Art. 17(6), Art. 17(7)]. In cases of serious accidents (defined as at least 1 death, 5+ serious injuries, or damage exceeding EUR 2 million), mandatory investigations are triggered [Art. 3(12), Art. 20].

Proof

Legal status

• In force
• as of 2026-04-17
• Original version (OJ L 138, 26.5.2016, p. 102), with corrigenda (OJ L 59, 7.3.2017 and OJ L 317, 9.12.2019)

Primary sources

• EUR-Lex — Full text
• ERA — European Union Agency for Railways — EU railway agency

What to do now

Legal / DPO

•Verify that single safety certificates (SSC) for all railway undertakings within your group are valid and cover the correct type, extent, and area of operation — renewal is required at least every 5 years [Art. 10(13)].
•Ensure cooperation agreements between the EU Agency for Railways and relevant national safety authorities are in place if operating across multiple Member States, including cross-border stations under the simplified regime [Art. 11, Art. 10(8)].
•Confirm that national rules applicable to your area of operation have been notified under the Directive and comply with the requirements of [Art. 8] — unnotified rules cannot be applied for safety certification purposes [Art. 8(11)].

Compliance

•Audit your safety management system (SMS) against the mandatory elements in [Art. 9(3)]: safety policy, risk assessment procedures, incident reporting, staff competence programmes, emergency plans, and internal audit provisions.
•Submit the annual safety report to the national safety authority by 31 May each year, covering CSI performance, internal audit results, deficiency observations, and CSM application [Art. 9(6)].
•Ensure entity-in-charge-of-maintenance (ECM) certification is current for all freight wagons and, where applicable, other vehicles — the ECM certificate must cover the four maintenance functions defined in [Art. 14(3)] and comply with Annex III.

IT / Security

•Integrate ERTMS (European Rail Traffic Management System) safety requirements into your control-command subsystem in accordance with the relevant TSIs, as the Directive identifies train control and signalling systems as critical to railway safety [Recital 16, Art. 16(2)(a)].
•Implement information management procedures within your SMS to ensure safety-critical data — including incident reports, risk assessments, and maintenance traceability — is documented, version-controlled, and accessible [Art. 9(3)(h)].
•Support the one-stop shop IT system for safety certification applications and ensure all relevant information is transmitted to and from this platform when the Agency acts as the certification body [Art. 10(3), Art. 12 of Regulation (EU) 2016/796].

Product / Engineering

•Ensure every vehicle placed on the network has a registered entity in charge of maintenance (ECM), and that the ECM's maintenance system meets the requirements of Annex III before the vehicle enters service [Art. 14(1), Art. 14(2)].
•Verify that interoperability constituents and subsystems supplied comply with the essential safety requirements of Directive (EU) 2016/797 and the relevant TSIs before integration into the rail system [Art. 4(4)(b)].
•Establish traceability for all safety-critical components and maintenance activities throughout the vehicle lifecycle, including documented return-to-service procedures after maintenance interventions [Art. 14(3)(c), Art. 14(3)(d)].

Key Terms

Single safety certificate (SSC): A certificate issued by the EU Agency for Railways or a national safety authority confirming that a railway undertaking has established its safety management system and can operate safely in a defined area of operation [Art. 10].
Safety management system (SMS): The organisation, arrangements, and procedures established by an infrastructure manager or railway undertaking to ensure the safe management of its operations, including risk control, staff competence, and incident reporting [Art. 3(9)].
National safety authority (NSA): The independent national body entrusted with tasks regarding railway safety, including issuing safety authorisations, supervising operators, and enforcing safety rules [Art. 3(7), Art. 16].
Common safety methods (CSMs): Methods adopted at EU level describing how to assess safety levels, achieve safety targets, and comply with other safety requirements, including risk evaluation and monitoring [Art. 3(6), Art. 6].
Common safety targets (CSTs): The minimum safety levels to be achieved by the EU rail system as a whole or by specific parts of it, expressed as risk acceptance criteria or target safety levels [Art. 3(5), Art. 7].
Entity in charge of maintenance (ECM): The entity responsible for maintaining a railway vehicle in a safe state of running, registered in the vehicle register and required to hold an ECM certificate for freight wagons [Art. 3(20), Art. 14].
Safety authorisation: The authorisation issued by the national safety authority to an infrastructure manager, confirming acceptance of its safety management system and procedures for safe design, maintenance, and operation of rail infrastructure [Art. 12].
Serious accident: A train collision or derailment resulting in at least 1 death, 5+ serious injuries, or damage of at least EUR 2 million, triggering a mandatory investigation by the independent investigating body [Art. 3(12)].

Frequently Asked Questions

What is the single safety certificate (SSC) and who issues it?

The SSC is the mandatory authorisation a railway undertaking needs to access EU rail infrastructure. It certifies that the undertaking has established a safety management system (SMS) and can operate safely. For operations in more than one Member State, the EU Agency for Railways issues the SSC. For operations limited to one Member State, the applicant may choose between the Agency or the national safety authority [Art. 10(1), Art. 10(5), Art. 10(8)].

How long is a single safety certificate valid?

A single safety certificate is valid for up to 5 years and must be renewed upon application. It must also be updated whenever the type, extent, or area of operation is substantially altered [Art. 10(13)].

What are the core elements of a safety management system (SMS)?

The SMS must include: a board-level safety policy, quantitative and qualitative safety targets, risk assessment procedures, staff training and competence programmes, incident reporting and investigation procedures, emergency plans coordinated with public authorities, and provisions for internal auditing. It must also address human factors and promote a culture of safety learning [Art. 9(2), Art. 9(3)].

What is the role of the entity in charge of maintenance (ECM)?

The ECM ensures that vehicles under its responsibility are in a safe state of running. It must establish a maintenance system covering four functions: management, maintenance development, fleet-maintenance management, and maintenance delivery. For freight wagons, ECM certification is mandatory; for other vehicles, implementing acts extend this requirement [Art. 14(2), Art. 14(3), Art. 14(4)].

What qualifies as a 'serious accident' under the Directive?

A serious accident is any train collision or derailment resulting in at least 1 death, serious injuries to 5 or more persons, or extensive damage to rolling stock, infrastructure or the environment. Extensive damage is defined as costs of at least EUR 2 million. All serious accidents must be investigated by an independent investigating body [Art. 3(12), Art. 20].

What happens if the national safety authority identifies a serious safety risk?

If the NSA identifies a serious safety risk during supervision — meaning a serious non-compliance that could lead to an accident — it must inform the Agency and other relevant NSAs. It may apply temporary safety measures, including immediately restricting or suspending operations. If the SSC was issued by the Agency, the NSA may request its restriction or revocation [Art. 17(6), Art. 17(7), Recital 29].

Does this Directive apply to metros and trams?

No. Metros, trams, light rail vehicles, and infrastructure used exclusively by them are excluded from the scope [Art. 2(2)]. However, Member States may voluntarily apply certain provisions to these systems under national law [Art. 2(4)].

Assessment Factors & Checklist

Premium

Start 7-day free trial

Questions for Your Lawyer

Premium

Start 7-day free trial

Conclusion & Summary

Premium

Start 7-day free trial

Detailed analysis with source links.

Schalten Sie die KI-Analyse frei — mit markierten Fundstellen und direkten Links zu EUR-Lex. 7 Tage kostenlos testen.

Start 7-day free trial →

Keine Kreditkarte heute. Kündigung jederzeit.